Whether a session secret is too weak to safely sign portal cookies.
The portal refuses to boot on a weak/missing secret because session cookies are HMAC-signed with it; a guessable key allows trivial session forgery.
The resolved session secret.
True when the secret is empty, too short, or a known placeholder.
Whether a session secret is too weak to safely sign portal cookies.
The portal refuses to boot on a weak/missing secret because session cookies are HMAC-signed with it; a guessable key allows trivial session forgery.